| g8245qrv.ouuyexwgv.top/contactos |  103.80.86.117 | 500 Internal Server Error | 286 B |
URL User Request GET HTTP/1.0g8245qrv.ouuyexwgv.top/contactos IP103.80.86.117:80 ASN#212238 Datacamp Limited
File typeHTML document, ASCII text Hashd8826a6f923cf0b8a54fff6694d7968d 8f58d51cf27f3736c6be9aecaef4b114a7ff6195 05aca3f12d00636ed4561bf87c6dfa3edd2891d3b50dcd1c4a96ee4b5b30a2d6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.top domain |
GET /contactos HTTP/1.1
Host: g8245qrv.ouuyexwgv.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 500 Internal Server Error
Date: Sun, 20 Oct 2024 12:22:28 GMT
Server: Apache/2.4.38 (Debian)
Access-Control-Allow-Origin: *
Set-Cookie: zcknrt_contactos=0; expires=Mon, 21-Oct-2024 12:22:28 GMT; Max-Age=86400; path=/
Content-Length: 286
Content-Type: text/html; charset=UTF-8
|
| g8245qrv.ouuyexwgv.top/favicon.ico | 103.80.86.117 | 302 Found | 0 B |
URL GET HTTP/1.1g8245qrv.ouuyexwgv.top/favicon.ico IP103.80.86.117:80 ASN#212238 Datacamp Limited
Requested byhttp://g8245qrv.ouuyexwgv.top/contactos
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: g8245qrv.ouuyexwgv.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://g8245qrv.ouuyexwgv.top/contactos
Cookie: zcknrt_contactos=0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sun, 20 Oct 2024 12:22:28 GMT
Server: Apache/2.4.38 (Debian)
Access-Control-Allow-Origin: *
Location: https://duckduckgo.com
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
|
IP 40.114.177.156:443
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttp://g8245qrv.ouuyexwgv.top/contactos CertificateIssuerDigiCert Inc Subject*.duckduckgo.com FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06 ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (40582), with no line terminators Hasha225adc10c8c2f7ff0c07729ba8d1075 6030564884174cc711970ecb32180f842c456201 873d5c2ea4d302e65e3723af90cbcdc25ce0c045381d1923d80fd9cd9b8061fd
GET / HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://g8245qrv.ouuyexwgv.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 20 Oct 2024 12:22:28 GMT
content-type: text/html; charset=UTF-8
content-length: 10468
vary: Accept-Encoding
etag: "67148dcf-28e4"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 20 Oct 2024 12:22:27 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
|